Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
File: IqGe2FosDPxPUL6tFvyfbxRlrRE.mft (raw, json)
Hash identifier: ViSnnTtjsv3vbJa7gxwczA1RCUwc1YQreNjo8oaNYJw=
Subject key identifier: 13:5F:7D:38:69:5F:8A:B0:39:43:92:92:23:45:F3:52:EA:FC:40:88
Authority key identifier: 22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
Certificate issuer: /CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Certificate serial: 01984AE59BEF03136ACD25962939B1C0C545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
Manifest number: 0522
Signing time: Sun 27 Jul 2025 08:00:18 +0000
Manifest this update: Sun 27 Jul 2025 08:00:18 +0000
Manifest next update: Mon 28 Jul 2025 08:00:18 +0000
Files and hashes: 1: IqGe2FosDPxPUL6tFvyfbxRlrRE.crl (hash: FomYSHNWTwrvTV5WUcmR0l8O+F9kFLB1zjuy+XoUYVQ=)
2: NppGj-vB7qPIZEIjN2QiF53Di1w.roa (hash: /HZmGG+wWIrcuKRavKc6Cvy6ql5RNC9frBmMmRXn2ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:9b:ef:03:13:6a:cd:25:96:29:39:b1:c0:c5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a19ed85a2c0cfc4f50bead16fc9f6f1465ad11
Validity
Not Before: Jul 27 08:00:18 2025 GMT
Not After : Jul 28 08:00:18 2025 GMT
Subject: CN=135f7d38695f8ab0394392922345f352eafc4088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:52:23:94:f4:34:ff:d9:67:58:09:a1:44:
b1:92:6a:e1:ab:35:43:d0:74:17:4c:86:0c:66:8e:
60:f9:bf:fc:24:af:c3:5b:d8:29:9b:24:ac:1f:b2:
96:98:28:b8:36:a5:6e:30:52:40:ca:9a:07:7a:11:
29:c7:0d:82:e7:b4:65:d7:ca:2f:7d:76:06:58:a6:
47:91:f1:e5:07:b7:f6:a1:ea:b6:c9:8e:72:40:c8:
c6:2a:ef:9b:06:bd:fe:4a:03:2a:be:f4:5b:5e:3d:
88:c7:8e:fa:43:0c:c7:07:d4:00:23:8a:a2:95:b6:
c3:56:d4:66:66:0d:51:d0:42:7a:cb:95:e8:df:a6:
73:09:61:03:3f:ba:96:19:70:53:c3:e6:d2:1d:66:
35:33:9b:3b:79:de:ef:7f:7f:9d:1c:c6:1e:68:26:
9a:81:7e:47:84:4e:a9:57:4a:6e:25:55:54:1a:04:
dc:b4:73:f6:ff:1f:67:b5:42:41:b0:67:63:3d:9f:
86:db:4b:73:13:a1:0e:84:47:6b:fc:f1:08:ff:40:
6b:36:bc:e4:a8:1c:45:ab:26:84:24:06:01:87:80:
16:54:04:8a:48:99:c8:5d:51:17:82:f6:8b:78:50:
b0:c5:6f:54:d2:b2:fe:7d:f5:91:65:73:03:c9:15:
8b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5F:7D:38:69:5F:8A:B0:39:43:92:92:23:45:F3:52:EA:FC:40:88
X509v3 Authority Key Identifier:
keyid:22:A1:9E:D8:5A:2C:0C:FC:4F:50:BE:AD:16:FC:9F:6F:14:65:AD:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqGe2FosDPxPUL6tFvyfbxRlrRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e7edff-86da-449f-b89c-d7b2ad01a1d7/1/IqGe2FosDPxPUL6tFvyfbxRlrRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a7:45:5e:12:c1:fa:dc:f8:ac:63:82:70:4e:82:24:13:07:
49:e4:65:1a:5c:15:4c:c9:f1:b5:73:71:5b:01:4d:1c:54:cf:
92:da:f8:de:89:1b:03:93:c1:15:ec:e8:c3:4f:44:35:6d:90:
68:01:a3:41:b8:64:e5:90:4b:d4:06:78:0a:1a:2e:cc:67:b1:
1b:7b:c8:2f:fc:64:db:bc:de:3c:17:f1:45:c7:b2:78:65:1e:
07:f0:e4:07:9e:4a:e2:a5:c9:9c:d9:1a:74:60:70:d3:57:ac:
c5:bc:2b:17:7c:9a:dd:13:8f:8a:70:6b:d9:da:14:eb:62:29:
ac:b4:f8:61:4e:d6:ca:fb:55:62:62:8f:2a:35:ce:59:f6:67:
34:af:d9:2b:72:84:5b:cb:fe:34:88:8d:b2:67:89:fe:31:e5:
f0:7e:b3:a0:82:7e:af:68:cd:05:20:c0:bc:82:ce:c1:d7:3a:
19:e1:8c:a6:34:61:ab:26:03:4b:af:41:92:ed:45:a8:bb:f1:
1f:e1:9c:b9:8a:6c:7c:31:8a:5b:09:6b:dd:86:c4:9a:63:2d:
13:a9:ee:c4:bc:a8:2e:e3:38:f8:a5:c3:44:b1:38:c4:60:e0:
0d:e4:df:47:74:97:a9:93:0d:b4:d4:c1:ba:41:ee:1d:82:dc:
96:d9:bf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:52:10 2025 by rpki-client